iaik.security.ec.ecdsa

Class TestECDSA

java.lang.Object

iaik.security.ec.ProtocolTestBase

iaik.security.ec.ecdsa.ECDSATestBase

iaik.security.ec.ecdsa.TestECDSA

public class TestECDSA
extends ECDSATestBase

Author:

Christian Hanser, Sebastian Ramacher

Field Summary

Fields

Modifier and Type	Field and Description
org.junit.rules.TestRule	rule_

Constructor Summary

Constructors

Constructor and Description
TestECDSA(String algorithm, int bitLength, boolean sideChannelProtection, boolean deterministicSigning)

Method Summary

Modifier and Type	Method and Description
static Collection<Object[]>	getParameters()
void	signAndVerify()
void	testPsychicSignature() Tests if ECDSA signature verification checks for zero r and s values.
void	testSignatureVerificationAfterSigning() Tests if ECDSA signature verification checks for zero r and s values.

Methods inherited from class iaik.security.ec.ecdsa.ECDSATestBase

setUp

Methods inherited from class iaik.security.ec.ProtocolTestBase

addProviders

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

rule_

public final org.junit.rules.TestRule rule_

Constructor Detail

TestECDSA

public TestECDSA(String algorithm,
                 int bitLength,
                 boolean sideChannelProtection,
                 boolean deterministicSigning)

Method Detail

getParameters

public static Collection<Object[]> getParameters()

signAndVerify

public void signAndVerify()
                   throws InvalidAlgorithmParameterException,
                          NoSuchAlgorithmException,
                          InvalidKeyException,
                          SignatureException

Throws:

InvalidAlgorithmParameterException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

testPsychicSignature

public void testPsychicSignature()
                          throws UnsupportedEncodingException,
                                 InvalidAlgorithmParameterException,
                                 NoSuchAlgorithmException,
                                 SignatureException,
                                 InvalidKeyException

Tests if ECDSA signature verification checks for zero r and s values. Known as CVE-2022-21449 "Psychic Signatures in Java%quot; Vulnerability detected by Neil Madden (https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/).

Throws:

UnsupportedEncodingException

InvalidAlgorithmParameterException

NoSuchAlgorithmException

SignatureException

InvalidKeyException

testSignatureVerificationAfterSigning

public void testSignatureVerificationAfterSigning()
                                           throws InvalidAlgorithmParameterException,
                                                  NoSuchAlgorithmException,
                                                  InvalidKeyException,
                                                  SignatureException

Tests if ECDSA signature verification checks for zero r and s values. Known as CVE-2022-21449 "Psychic Signatures in Java%quot; Vulnerability detected by Neil Madden (https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/).

Throws:

InvalidAlgorithmParameterException

NoSuchAlgorithmException

InvalidKeyException

SignatureException